Lucene search

K
osvGoogleOSV:ALSA-2023:7253
HistoryNov 15, 2023 - 12:00 a.m.

Moderate: dotnet8.0 security update

2023-11-1500:00:00
Google
osv.dev
10
dotnet framework
security update
arbitrary file write
deletion vulnerability
blazor forms
asp.net
cve-2023-36049
cve-2023-36558

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

  • dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
  • dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.